Book Image

Cloud Native with Kubernetes

By : Alexander Raul
Book Image

Cloud Native with Kubernetes

By: Alexander Raul

Overview of this book

Kubernetes is a modern cloud native container orchestration tool and one of the most popular open source projects worldwide. In addition to the technology being powerful and highly flexible, Kubernetes engineers are in high demand across the industry. This book is a comprehensive guide to deploying, securing, and operating modern cloud native applications on Kubernetes. From the fundamentals to Kubernetes best practices, the book covers essential aspects of configuring applications. You’ll even explore real-world techniques for running clusters in production, tips for setting up observability for cluster resources, and valuable troubleshooting techniques. Finally, you’ll learn how to extend and customize Kubernetes, as well as gaining tips for deploying service meshes, serverless tooling, and more on your cluster. By the end of this Kubernetes book, you’ll be equipped with the tools you need to confidently run and extend modern applications on Kubernetes.
Table of Contents (22 chapters)
1
Section 1: Setting Up Kubernetes
5
Section 2: Configuring and Deploying Applications on Kubernetes
11
Section 3: Running Kubernetes in Production
16
Section 4: Extending Kubernetes

Chapter 12: Kubernetes Security and Compliance

In this chapter, you will learn about some of the key pieces of Kubernetes security. We'll discuss some recent Kubernetes security issues, and the finding of a recent audit that was performed on Kubernetes. Then, we'll look at implementing security at each level of our cluster, starting with the security of Kubernetes resources and their configurations, moving on to container security, and then finally, runtime security with intrusion detection. To start, we will discuss some key security concepts as they relate to Kubernetes.

In this chapter, we will cover the following topics:

  • Understanding security on Kubernetes
  • Reviewing CVEs and security audits for Kubernetes
  • Implementing tools for cluster configuration and container security
  • Handling intrusion detection, runtime security, and compliance on Kubernetes